Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 19:01:21 UTC
Home > List all groups > List all tools > List all groups using tool BlankBot
 Tool: BlankBot
Names BlankBot
Category Malware
Type Banking trojan, Backdoor, Info stealer, Credential stealer
Description
(Intel471) In July 2024, Intel 471 Malware Intelligence researchers discovered the new
BlankBot Android banking trojan.
Based on the application names and certain strings found within the application, it is highly
likely BlankBot’s primary targets are Turkish users.
BlankBot features a range of malicious capabilities, which include customer injections,
keylogging, screen recording and it communicates with a control server over a WebSocket
connection.
Information
<https://intel471.com/blog/blankbot-a-new-android-banking-trojan-with-screen-recording-keylogging-and-remote-control-capabilities>
Malpedia <https://malpedia.caad.fkie.fraunhofer.de/details/apk.blankbot>
Last change to this tool card: 27 December 2024
Download this tool card in JSON format
All groups using tool BlankBot
Changed Name Country Observed
Unknown groups
  _[ Interesting malware not linked to an actor yet ]_  
1 group listed (0 APT, 0 other, 1 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=3531375b-b63c-4b6c-8558-6ba176f2d75e
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=3531375b-b63c-4b6c-8558-6ba176f2d75e
Page 1 of 1